LI82168: DEVELOPER PORTAL API TEST TOOL SHOULD SEND GRANT_TYPE AND SCOPE IN FORM BODY INSTEAD OF QUERY PARAMETERS

APAR status

• Closed as program error.

Error description

• Developer Portal API test tool should send grant_type and scope
  in form body instead of query parameters.
  
  Steps to reproduce the issue:
  - Publish an API with OAuth2 security definition (Client
  Credentials Grant)
  - Developer subscribes to this API with an application and
  selects an operation and click "Try it". After enter client id /
  secret and select the scope, when the "Get Token" button is
  clicked next, Developer Portal use below URL to call the token
  endpoint:
  https://token_endpoint?grant_type=client_credentials&scope=samp
  lescope
  

Local fix

Problem summary

• Developer Portal API test tool should send grant_type and scope
  in form body, instead of query parameters.
  
  These steps can be used to illustrate the issue:
  - Publish an API with OAuth2 security definition (Client
  Credentials Grant)
  - Developer subscribes to this API with an application and
  selects an operation and click "Try it". After enter client id /
  secret and select the scope, when the "Get Token" button is
  clicked, Developer Portal use below URL to call the token
  endpoint:
  https://token_endpoint?grant_type=client_credentials&scope=sampl
  escope
  

Problem conclusion

• Product is updated in 2018.4.1.17, 10.0.3 and 10.0.1.4 to
  address the issue.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  API CONNECT ENT

• Fixed component ID

  5725Z2201

Applicable component levels

• R18X PSY

     UP